rmhowe425/poc-cve-2026-18729Proof-of-concept exploit for CVE-2026-18729 in Langflow, demonstrating remote code execution via crafted requests. Includes usage instructions and evidence of code execution.
Proof of concept exploit code for CVE-2026-18729
python3 poc.py -url -uname -pword -c
NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The bash output is stored in _out within the build scope and isn't serialized into the JSON response, so the lack of command output doesn't mean the command wasn't executed.
